1 to 25 of 270 Permanent Threat Modelling Jobs in London

tooling behind themBe the person in the room when something real happens, and the person writing the honest post-mortem afterwardsThreat intelligence and threat modellingStand up a threat intelligence capability — somewhere past incidents, near-misses, industry reports, and internal telemetry get captured, tagged, and made usefulBuild this into … threat intel data warehouse that actually informs decisions: future threat modelling, control design, roadmap prioritisation, and tabletop scenarios. Not a dashboard nobody readsRun threat modelling as a routine practice, not a one-off — including automated threat modelling using AI against designs, code ...

misconfiguration management so that findings are actionable, low-noise and owned by the right teams. Day to day, you’ll run practical threat-modelling sessions, review application and cloud designs, improve security playbooks, support vulnerability and misconfiguration remediation, and build automation that reduces toil. We’re looking … misconfiguration & vulnerability management: experience identifying and reducing infrastructure-as-code and AWS vulnerabilities & misconfigurations at scale through pragmatic guardrails, tooling and clear remediation paths. Threat modelling: confidence running lightweight, practical threat-modelling sessions that lead to useful engineering decisions and risk reduction. CI/ ...

Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Security Operations Analyst | Cyber Threat Intelligence | Threat ModellingWe are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing … environments. This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat ...

management and AWS misconfiguration management so that findings are actionable, low-noise and owned by the right teams.Day to day, you’ll run practical threat-modelling sessions, review application and cloud designs, improve security playbooks, support vulnerability and misconfiguration remediation, and build automation that reduces toil. … misconfiguration & vulnerability management: experience identifying and reducing infrastructure-as-code and AWS vulnerabilities & misconfigurations at scale through pragmatic guardrails, tooling and clear remediation paths.Threat modelling: confidence running lightweight, practical threat-modelling sessions that lead to useful engineering decisions and risk reduction.CI/CD and code security: hands ...

coding guidance so that security findings are clear, actionable and owned by the right teams. You’ll work closely with engineers to support practical threat modelling, triage application vulnerabilities, improve security playbooks and help teams remediate issues in a pragmatic way. You do not need … code security awareness: familiarity with security tooling in development workflows, such as SAST, software composition analysis, secret scanning or repository security controls. Threat modelling awareness: experience participating in, supporting or facilitating lightweight threat-modelling sessions for applications, services or new features. Automation mindset: ability to write ...

Agile delivery teams by embedding security-by-design principles throughout the software development lifecycle.Define and document security patterns, reference architectures, and reusable security artefacts.Lead threat modelling activities and identify appropriate mitigation strategies.Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making.Advise on identity … operating within client-facing and/or consultancy environments.Demonstrated experience designing and implementing enterprise security architectures.Strong understanding of security architecture methodologies and frameworks.Experience conducting threat modelling and security risk assessments.Experience supporting security assurance activities within regulated environments.Proven ability to balance security requirements with operational and business objectives.Experience designing ...

teams by embedding security-by-design principles throughout the software development lifecycle. Define and document security patterns, reference architectures, and reusable security artefacts. Lead threat modelling activities and identify appropriate mitigation strategies. Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making. Advise … facing and/or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security risk assessments. Experience supporting security assurance activities within regulated environments. Proven ability to balance security requirements with operational and business ...

secure coding guidance so that security findings are clear, actionable and owned by the right teams.You’ll work closely with engineers to support practical threat modelling, triage application vulnerabilities, improve security playbooks and help teams remediate issues in a pragmatic way. You do not need … code security awareness: familiarity with security tooling in development workflows, such as SAST, software composition analysis, secret scanning or repository security controls.Threat modelling awareness: experience participating in, supporting or facilitating lightweight threat-modelling sessions for applications, services or new features.Automation mindset: ability to write scripts or small ...

teams by embedding security-by-design principles throughout the software development lifecycle. Define and document security patterns, reference architectures, and reusable security artefacts. Lead threat modelling activities and identify appropriate mitigation strategies. Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making. Advise … facing and/or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security risk assessments. Experience supporting security assurance activities within regulated environments. Proven ability to balance security requirements with operational and business ...

everything they build. Key Responsibilities Define and evolve Product Security strategy across the Secure SDLC. Embed Secure-by-Design principles into software engineering. Lead threat modelling and security architecture reviews. Build scalable security tooling and automation that integrates into developer workflows. Partner with Engineering and Product teams … security controls. Built Secure SDLC frameworks developers genuinely adopted. Strong software engineering background with the technical credibility to influence engineers. Hands-on experience with threat modelling, Secure-by-Design, security architecture and developer enablement. Experience building security tooling, automation or integrating security into CI/CD pipelines. Remained ...

everything they build. Key Responsibilities Define and evolve Product Security strategy across the Secure SDLC. Embed Secure-by-Design principles into software engineering. Lead threat modelling and security architecture reviews. Build scalable security tooling and automation that integrates into developer workflows. Partner with Engineering and Product teams … security controls. Built Secure SDLC frameworks developers genuinely adopted. Strong software engineering background with the technical credibility to influence engineers. Hands-on experience with threat modelling, Secure-by-Design, security architecture and developer enablement. Experience building security tooling, automation or integrating security into CI/CD pipelines. Remained ...

reduce persistent risks and proactively shape organization-level security posture.You are responsible for establishing and maintaining the enterprise-wide application security review methodology — including threat modelling philosophy, security testing standards, and remediation validation. You design security patterns and standards that serve as the foundation for secure development across … high-risk issues and establishing risk acceptance processes at the VP and SVP level.This role requires deep expertise in application security architecture, advanced threat modelling, and secure development practices, combined with strong business acumen to perform cost-benefit analyses and influence product roadmaps. You will regularly partner with ...

Threat Intelligence Specialist Location: London (hybrid) Careel Level: Specialist Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside … point of application. Role Description As a Threat Intelligence Specialist, you will report to the CI UKI (UK and Ireland) Lead. You will be responsible for supporting clients in deploying and configuring threat intelligence tooling- including Threat Intelligence Platforms (TIPs) and supporting capabilities. Independently or as part ...

product and technology teams.Set and direct a secure SDLC strategy that engineers engage with, coaching and mentoring our application security engineer with running our threat modelling program, embedding security in CI/CD, and iteratively improving our vulnerability management processes.Partner with engineering leadership to ensure risk-driven supply … with our CISO to shape and implement an AI security posture that is embedded in strong security foundations, helping us stay ahead of the threat landscape rather than reacting to it.Detection, Response & SOC PartnershipOwn the strategic relationship with our 24/7 outsourced SOC holding them to a high ...

dayLondon, England Contract Threat Intelligence Analyst594 per day (Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Threat Intelligence Analyst | Cyber Security | Enterprise SecurityWe are currently recruiting for an experienced Threat Intelligence Analyst to join a major cybersecurity … programme supporting critical business and technology operations. This is an exciting opportunity for a security professional with strong experience in Threat Intelligence, Enterprise Security Architecture, Platform Security, and Security Architecture Design to help identify, analyse, and mitigate emerging cyber threats across complex environments. Working within a highly skilled cybersecurity ...

frameworks for AI/ML pipelines, including data ingestion, training, inference, and deployment.Establish AI trust, risk, and compliance controls (e.g., explainability, fairness, robustness).2. Threat Modelling & Risk ManagementConduct threat modelling for AI systems, identifying vulnerabilities such as:Adversarial attacks (evasion, poisoning)Model inversion and extractionData leakage … systems.Strong knowledge of:Machine learning frameworks (TensorFlow, PyTorch, etc.)Cloud platforms (Azure, AWS, GCP) and AI servicesIdentity & access management, encryption, and network securityExperience in threat modeling and risk assessment methodologies.Bachelor’s or Master’s degree in Computer Science, Cybersecurity, AI/ML, or related field.Preferred QualificationsCertifications such as:CISSP ...

deployment pipelines Define AI & security data governance and access control frameworks for systems Create security-by-design principles for AI model development Design threat models specific to AI/ML systems and attack surfaces Technical Security Standards: Develop and maintain security frameworks and best practices Create secure coding standards … logging, and anomaly detection for AI systems Oversee secure data pipelines and feature stores Design isolation and sandboxing for high-risk AI workloads Risk & Threat Mitigation: Conduct threat modelling for AI systems (adversarial attacks, model poisoning, data poisoning) Design defences against AI-specific vulnerabilities Implement model robustness ...

requirements are met.Key job responsibilities- Security Reviews: Conduct design reviews for new and existing services, evaluating architecture documents and system designs for security risks.- Threat Modelling: Identify attack vectors and security weaknesses in application architectures through structured threat modelling exercises.- Penetration Testing: Coordinate penetration testing … following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development- Experience with coding/scripting in one or more languages (e.g., Python, C, C++, Java, Ruby ...

/070202Job Type: PermanentSalary: 60,000 - 80,000 Location: Westminster, Central LondonSector: ITPosted: 2026-03-23An exciting opportunity has arisen for a Threat Detection Engineer to join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare.As … Threat Detection Engineer, you will be responsible for developing and enhancing threat detection capabilities within a modern cloud-first setting.This role offers hybrid/remote working options, a salary range of 60,000 - 80,000 and benefits.You will be responsible for:Designing and implementing threat-led detection ...

Security: Design and validate secure architectures for multi-cloud and hybrid environments (AWS, Azure, GCP), focusing on platform protection, network resilience, and digital sovereignty. Threat Modelling & Analysis: Establish and implement a tactical threat modelling methodology (e.g., STRIDE, PASTA) to identify design flaws early in the development ...

risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight.Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions.Advise on secure patterns for AI application ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through … SAST/DAST tooling, API security, and container security in agile delivery contexts.Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance ...

Sports. It is a program leadership role responsible for embedding security into how products are designed, built, and shipped — and for owning the full threat detection and incident response pipeline end-to-end.The Director sets direction for a global team spanning secure development lifecycle, security architecture, threat modeling … across multiple regions and time zones.Set team objectives aligned to functional and company-level OKRs. Own delivery against them.Product SecurityDrive shift-left security — embed threat modelling, secure design review, and SDL practices into the development lifecycle.Own the security architecture direction, including zero trust principles and secure design patterns.Own ...

Sports. It is a program leadership role responsible for embedding security into how products are designed, built, and shipped — and for owning the full threat detection and incident response pipeline end-to-end. The Director sets direction for a global team spanning secure development lifecycle, security architecture, threat … time zones. Set team objectives aligned to functional and company-level OKRs. Own delivery against them. Product Security Drive shift-left security — embed threat modelling, secure design review, and SDL practices into the development lifecycle. Own the security architecture direction, including zero trust principles and secure design patterns. ...